Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/036b56b5-364d-3372-98b5-496b3164eb37.roa
File:                     036b56b5-364d-3372-98b5-496b3164eb37.roa (raw, json)
Hash identifier:          OpHp9uNW3aMxepgaA6D4nO6P3ibsB0+pPsnEv1S6lfQ=
Subject key identifier:   69:4E:6D:5A:1D:47:73:E1:82:46:5E:86:E0:EF:C6:45:D9:7B:D6:3F
Certificate issuer:       /CN=e0927227-fbc8-4924-89af-1885637cb07c
Certificate serial:       010D0C9F4328584AC8764BD0349D238BFE479F80
Authority key identifier: 42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/036b56b5-364d-3372-98b5-496b3164eb37.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     55002
IP address blocks:        2604:e180::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:4b:d0:34:9d:23:8b:fe:47:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0927227-fbc8-4924-89af-1885637cb07c
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=f10b5ae0-eebb-4c7d-9414-94b03ffaa51b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c3:5e:78:67:43:5e:a4:8c:68:be:b6:ed:69:
                    1c:55:1e:96:07:12:db:01:6b:12:2d:d8:e9:f8:82:
                    df:1d:71:2a:9f:c3:76:72:a3:b2:73:b5:cd:1f:38:
                    56:10:9f:e0:50:89:e7:36:71:7a:ac:7b:2c:9b:f0:
                    3c:47:51:6f:3c:a4:7e:c8:e6:35:e3:ae:63:94:31:
                    36:86:a3:08:d3:c9:3f:a8:98:8d:64:90:e8:6c:d6:
                    c1:78:d0:1f:46:ac:f1:d2:cd:72:5a:a8:be:d0:98:
                    b2:e7:1c:60:21:55:35:7d:04:7e:55:14:d6:55:01:
                    6d:4d:a3:62:77:9f:54:6b:81:64:57:3e:2b:58:97:
                    b4:3a:98:6b:ce:9f:c5:b0:3e:11:b8:81:7b:af:b8:
                    1b:5f:fd:5c:9c:c8:d2:2b:ae:22:b2:0c:59:fe:48:
                    6f:87:13:4f:3f:0b:e3:e2:18:bd:f9:9a:62:65:32:
                    fa:89:6d:5b:d4:00:57:d8:5a:a6:5c:5d:99:65:64:
                    05:08:35:d0:fe:71:7b:74:d0:e9:56:d7:3f:00:de:
                    e5:db:7f:92:44:09:09:af:a7:fa:f1:23:75:c6:99:
                    3a:8c:b4:bb:9d:eb:9e:a6:fe:c7:e1:43:d1:96:d7:
                    2e:8c:5e:9e:86:14:8e:c9:07:b1:d9:36:c7:c0:b9:
                    48:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4E:6D:5A:1D:47:73:E1:82:46:5E:86:E0:EF:C6:45:D9:7B:D6:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/036b56b5-364d-3372-98b5-496b3164eb37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.crl

            X509v3 Authority Key Identifier:
                keyid:42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e180::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:e4:00:06:f6:2f:20:63:b5:78:a0:46:90:ee:83:49:17:8f:
         5d:b7:31:fa:ed:9f:26:31:64:d8:75:08:4c:42:0f:31:6d:bd:
         6a:43:b7:8a:a2:1e:d9:e6:49:8c:a3:ce:75:a5:25:f7:4b:49:
         ca:75:5a:61:62:38:35:2b:f2:d0:f3:2d:79:b6:39:f7:2e:2f:
         5f:a3:34:f3:44:ff:1e:83:0c:b0:12:e1:7b:49:e9:6e:e1:9a:
         de:4e:0c:a7:bc:4f:3e:a4:25:6a:01:44:d7:2c:4b:0b:48:fb:
         c6:87:06:e3:8b:5b:30:ec:ad:51:24:0e:00:01:f9:0a:49:fb:
         01:a4:a5:39:ad:46:83:ae:e3:5d:98:94:b2:f2:f3:b7:c4:c3:
         82:4c:df:90:f3:da:fd:7f:a9:4f:f7:98:9d:7c:9c:49:78:44:
         0b:ae:0b:e4:05:f2:76:d7:33:6e:f3:1c:c6:a1:5b:2e:9c:7e:
         94:c9:41:07:a0:d7:b2:bf:33:11:b8:57:79:3d:05:6d:98:29:
         da:00:d5:e1:3b:cb:f3:13:74:81:6e:9a:da:80:4d:43:7b:31:
         86:d9:ea:e8:61:d8:f2:90:33:37:f9:be:21:74:fe:63:41:0f:
         41:8f:e2:ac:5c:a9:2d:85:ea:6b:aa:06:d0:52:cf:ce:5b:87:
         90:ae:5a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:38:25 2025 by rpki-client